soloforge 1.4.15 → 1.5.0

package/dist/engine/gate_checks/checkReleaseIssueDesignPath.js

@@ -0,0 +1,736 @@
+/**
+ * 门禁检查模块 — Phase 15: 发布问题架构决策与设计产物真实消费。
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { safeReadCached } from "./helpers.js";
+import { sourceContainsPattern, sourceContainsCall, sourceContainsIdentifier, sourceContainsZodSchema, sourceContainsPropertyAccess, } from "../source_code_matcher.js";
+export async function check(ctx, hardFail, info) {
+    const rootDir = ctx.rootDir;
+    const _info = info ?? (() => { });
+    const toolsText = safeReadCached(path.join(rootDir, "src", "adapters", "claude_code", "tools.ts"), ctx.readCache) ?? "";
+    const cliText = safeReadCached(path.join(rootDir, "src", "bin", "soloforge.ts"), ctx.readCache) ?? "";
+    const workflowText = (safeReadCached(path.join(rootDir, "src", "adapters", "shared", "workflow_template.ts"), ctx.readCache) ?? "")
+        + (safeReadCached(path.join(rootDir, "src", "engine", "workflow_rule_generator.ts"), ctx.readCache) ?? "");
+    // ══ 前置检查: 发布文档一致性 ══
+    const gateDocText = safeReadCached(path.join(rootDir, "docs", "正式发布门槛.md"), ctx.readCache) ?? "";
+    // 发布问题场景矩阵: 结构化场景注册表验证测试文件存在 + 执行证据
+    {
+        const { validateReleaseIssueScenarios, executeReleaseIssueScenarios } = await import("../release_issue_scenario_registry.js");
+        const scenarioResult = validateReleaseIssueScenarios(rootDir);
+        _info(`  发布问题场景: ${scenarioResult.scenario_count} 条`);
+        if (scenarioResult.missing_runners.length > 0) {
+            hardFail("RELEASE_ISSUE_SCENARIO_NO_RUNNER", `发布问题场景缺少 runner: ${scenarioResult.missing_runners.join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "所有场景必须有真实生产入口 runner", "为缺失场景添加 runner");
+        }
+        if (scenarioResult.missing_tests.length > 0) {
+            hardFail("RELEASE_ISSUE_SCENARIO_TESTS_MISSING", `发布问题场景引用的测试文件缺失: ${scenarioResult.missing_tests.join("; ")}`, scenarioResult.missing_tests.map(m => m.split(": ")[1] ?? "unknown"), "release-issues", "场景测试文件必须存在", "创建缺失的测试文件");
+        }
+        // 运行所有场景收集执行证据（全部必须有 runner）
+        const execResults = await executeReleaseIssueScenarios();
+        const failed = execResults.filter(r => r.status === "fail");
+        _info(`  发布问题场景执行: ${execResults.length} 条已执行，${failed.length} 条失败`);
+        if (failed.length > 0) {
+            hardFail("RELEASE_ISSUE_SCENARIO_EXECUTION_FAILED", `发布问题场景执行失败: ${failed.map(f => `${f.scenario_id}: ${f.error ?? "unknown"}`).join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "所有场景执行必须通过", "修复失败场景的 runner 逻辑");
+        }
+        // R10: 所有场景必须有 production_trace 且 tool_entrypoint 引用真实工具
+        const noTrace = execResults.filter(r => !r.production_trace);
+        if (noTrace.length > 0) {
+            hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `场景缺少 production_trace: ${noTrace.map(r => r.scenario_id).join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "所有场景必须有 production_trace 记录真实入口", "为缺失场景添加 production_trace");
+        }
+        // R10.1: 每个场景（非 engine_contract 声明）的 tool_entrypoint 必须包含真实工具名
+        const allRealToolNames = ["sf_classify", "sf_expand", "sf_verify", "sf_deliver", "sf_learn", "sf_accept", "sf_record_verification_execution", "sf_scaffold", "sf_classify", "soloforge next", "checkArchitectureDecisionWorkshopGate", "planNextAction"];
+        const fakeTraceScenarios = execResults.filter(r => r.production_trace &&
+            !allRealToolNames.some(t => r.production_trace.tool_entrypoint.includes(t)) &&
+            !r.production_trace.gates_consumed?.includes("engine_contract"));
+        if (fakeTraceScenarios.length > 0) {
+            hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `场景 production_trace 不引用真实工具入口: ${fakeTraceScenarios.map(r => `${r.scenario_id}(entrypoint=${r.production_trace.tool_entrypoint})`).join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "所有场景的 production_trace.tool_entrypoint 必须引用真实工具（sf_classify/sf_expand/adapter gate 等）", "用 createToolHarness 重写 runner");
+        }
+        // R12: production_trace 的 diagnostic_codes 必须非空（来自工具返回值或函数调用结果）
+        const noDiagCodes = execResults.filter(r => r.production_trace && (!r.production_trace.diagnostic_codes || r.production_trace.diagnostic_codes.length === 0));
+        if (noDiagCodes.length > 0) {
+            hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `场景 production_trace 缺少 diagnostic_codes: ${noDiagCodes.map(r => r.scenario_id).join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "所有 production_trace 必须包含来自工具/函数返回值的 diagnostic_codes", "为场景添加真实 diagnostic_codes");
+        }
+        // R14: architecture-workshop 非 low-risk 场景必须真正触发 workshop（不得假绿）
+        {
+            const archNonLowRisk = execResults.filter(r => r.scenario_id.startsWith("release-scenario-architecture-workshop-") &&
+                !r.scenario_id.includes("low-risk-skip"));
+            const fakeGreenPatterns = ["workshop=false", "domains=0", "no workshop", "blocked by earlier gate"];
+            const fakeGreens = archNonLowRisk.filter(r => r.status === "pass" && fakeGreenPatterns.some(p => r.evidence?.includes(p)));
+            if (fakeGreens.length > 0) {
+                hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `architecture-workshop 场景假绿: ${fakeGreens.map(r => `${r.scenario_id}(evidence=${r.evidence?.slice(0, 120)})`).join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "非 low-risk 架构研讨场景必须真正触发 architecture_decision_workshop，不得把证据门阻断当作 pass", "确保场景提供足够证据通过 evidence grounding gate，使 workshop gate 能实际触发");
+            }
+            // 非 low-risk 场景必须同时有 sf_classify 和 sf_expand 入口
+            const missingEntrypoint = archNonLowRisk.filter(r => r.production_trace &&
+                (!r.production_trace.tool_entrypoint.includes("sf_classify") || !r.production_trace.tool_entrypoint.includes("sf_expand")));
+            if (missingEntrypoint.length > 0) {
+                hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `architecture-workshop 场景缺少 sf_classify 或 sf_expand 入口: ${missingEntrypoint.map(r => `${r.scenario_id}(entrypoint=${r.production_trace.tool_entrypoint})`).join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "architecture-workshop 非 low-risk 场景必须同时通过 sf_classify 和 sf_expand 真实 MCP 工具执行", "使用 createToolHarness + callTool('sf_classify') + callTool('sf_expand') 重写 runner");
+            }
+        }
+        // R15: production_trace.diagnostic_codes 不得包含运行时异常
+        {
+            const runtimeErrorPattern = /Cannot read|TypeError|ReferenceError|^undefined$|uncaught exception|\.error\b/i;
+            const runtimeDiagCodes = execResults.filter(r => r.production_trace?.diagnostic_codes?.some(c => runtimeErrorPattern.test(c)));
+            if (runtimeDiagCodes.length > 0) {
+                hardFail("RELEASE_ISSUE_SCENARIO_DIAGNOSTIC_SWALLOWED_ERROR", `场景 production_trace.diagnostic_codes 包含运行时异常（不是业务/门禁诊断码）: ${runtimeDiagCodes.map(r => `${r.scenario_id}(codes=${r.production_trace.diagnostic_codes.filter(c => runtimeErrorPattern.test(c)).join("; ")})`).join("; ")}`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "diagnostic_codes 必须来自真实业务/门禁诊断，不得把异常信息当作有效诊断码", "定位异常根因并修复，或确保场景提供完整输入使工具不抛异常");
+            }
+        }
+        // R10: 每个 problem 必须至少有一个场景通过真实 MCP 工具入口执行
+        const realToolNames = ["sf_classify", "sf_expand", "sf_verify", "sf_deliver", "sf_learn", "sf_accept", "sf_record_verification_execution", "sf_scaffold"];
+        // 用 scenario_id 前缀识别 problem 归属
+        const problemPrefixes = {
+            "problem-61": ["release-scenario-architecture-workshop-", "release-scenario-decision-workshop-"],
+            "problem-62": ["release-scenario-design-pack-"],
+            "problem-63": ["release-scenario-template-contract-"],
+            "problem-64": ["release-scenario-template-visibility-"],
+            "problem-68": ["release-scenario-code-observability-"],
+        };
+        for (const [problem, prefixes] of Object.entries(problemPrefixes)) {
+            const problemScenarios = execResults.filter(r => prefixes.some(p => r.scenario_id.startsWith(p)));
+            const withRealTools = problemScenarios.filter(r => r.production_trace && realToolNames.some(t => r.production_trace.tool_entrypoint.includes(t)));
+            if (withRealTools.length === 0 && problemScenarios.length > 0) {
+                hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `${problem} 无场景通过真实 MCP 工具入口执行`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", `R10 ${problem} 必须有通过 sf_classify/sf_expand 等真实 MCP 工具执行的场景`, "用 createToolHarness + callTool 重写 runner");
+            }
+        }
+        // R13: problem-61 必须证明 awaiting_confirmation 阻断 + 确认放行双向
+        {
+            const p61 = execResults.filter(r => r.scenario_id.startsWith("release-scenario-decision-workshop-"));
+            // 阻断证据: evidence 包含 "awaiting" 或 diagnostic_codes 包含决策研讨阻断码
+            const hasAwaiting = p61.some(r => r.evidence?.includes("awaiting") ||
+                r.production_trace?.diagnostic_codes?.some(c => c.includes("决策研讨") || c.includes("awaiting_confirmation")));
+            // 放行证据: 至少一个 decision_workshop 场景通过两次 sf_expand（tool_entrypoint 含两个 sf_expand）
+            const hasConfirmedPass = p61.some(r => r.status === "pass" && r.production_trace?.tool_entrypoint &&
+                (r.production_trace.tool_entrypoint.match(/sf_expand/g) ?? []).length >= 2);
+            if (!hasAwaiting || !hasConfirmedPass) {
+                hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `problem-61 缺少 awaiting_confirmation 阻断+放行双向证据 (awaiting=${hasAwaiting}, confirmed=${hasConfirmedPass})`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "problem-61 必须有场景证明 decision_workshop 阻断后确认放行", "确保 data-migration/security-policy 等场景含 awaiting 阻断和确认放行双向证据");
+            }
+        }
+        // problem-63 必须在同一正式产物任务上证明阻断、清零、接受与交付，不能由描述文字自证。
+        {
+            const p63 = execResults.filter(r => r.scenario_id.startsWith("release-scenario-template-contract-"));
+            const lifecycleProof = p63.find(r => r.scenario_id === "release-scenario-template-contract-repair-directive")?.behavioral_proof;
+            const sameTask = lifecycleProof?.task_id
+                && lifecycleProof.blocked_task_id === lifecycleProof.task_id
+                && lifecycleProof.delivered_task_id === lifecycleProof.task_id;
+            const completed = lifecycleProof?.contract_blocked === true
+                && lifecycleProof?.repair_directive_cleared === true
+                && lifecycleProof?.artifact_status === "accepted"
+                && !!lifecycleProof?.acceptance_confirmation_ref
+                && lifecycleProof?.delivery_succeeded === true;
+            if (!sameTask || !completed) {
+                hardFail("RELEASE_ISSUE_SCENARIO_NO_PRODUCTION_TRACE", `problem-63 缺少同任务正式产物生命周期证据 (same_task=${!!sameTask}, completed=${completed})`, ["src/engine/release_issue_scenario_registry.ts"], "release-issues", "problem-63 必须从同一 task 的 artifact_output 证明阻断、重验、显式接受和成功交付", "修复 repair-directive 场景的 behavioral_proof 与真实工具链");
+            }
+        }
+    }
+    // R10: index_only 泄漏行为门禁 — 通过真实 sf_expand 验证 index_only 不进入 prompt
+    {
+        const { createToolHarness } = await import("../release_tool_harness.js");
+        const { clearInjectionContractCache } = await import("../knowledge_injection_boundary.js");
+        clearInjectionContractCache();
+        try {
+            const harness = await createToolHarness({ copyKnowledge: true });
+            try {
+                const all = harness.knowledgeIndex.getAllEntries();
+                // 找到 index_only 条目
+                const { buildTemplateAssetContracts } = await import("../template_asset_contract_registry.js");
+                const contracts = buildTemplateAssetContracts(rootDir);
+                const indexOnlyIds = new Set(contracts.filter(c => c.runtime_visibility === "index_only").map(c => c.asset_id));
+                // R12: 前置条件缺失 = hardFail，不得静默跳过
+                if (all.project.length === 0) {
+                    hardFail("RELEASE_ISSUE_INDEX_ONLY_PROMPT_LEAK", "copyKnowledge 后无项目资产被索引，前置条件不满足", ["src/engine/knowledge_injection_boundary.ts"], "release-issues", "index_only 行为检查必须有同步+索引的资产", "检查 copyKnowledgeToProject 和 KIM build");
+                }
+                if (indexOnlyIds.size === 0) {
+                    hardFail("RELEASE_ISSUE_INDEX_ONLY_PROMPT_LEAK", "模板合同中无 index_only 资产，前置条件不满足", ["src/engine/template_asset_contract_registry.ts"], "release-issues", "index_only 行为检查必须存在 index_only 合同", "检查 buildTemplateAssetContracts 是否注册了 index_only 资产");
+                }
+                const clsRaw = await harness.callTool("sf_classify", { intent: "添加用户管理功能" });
+                const cls = harness.parseResult(clsRaw);
+                if (!cls.task_id) {
+                    hardFail("RELEASE_ISSUE_INDEX_ONLY_PROMPT_LEAK", "sf_classify 未返回 task_id，前置条件不满足", ["src/engine/classifier.ts"], "release-issues", "index_only 行为检查必须 sf_classify 返回有效 task_id", "检查分类器是否正常返回");
+                }
+                const expRaw = await harness.callTool("sf_expand", { task_id: cls.task_id });
+                const exp = harness.parseResult(expRaw);
+                // index_only 资产不得进入 matched_knowledge
+                const leaked = (exp.matched_knowledge ?? []).filter((k) => indexOnlyIds.has(k.id));
+                if (leaked.length > 0) {
+                    hardFail("RELEASE_ISSUE_INDEX_ONLY_PROMPT_LEAK", `index_only 资产泄漏到 expand 结果: ${leaked.map((k) => k.id).join(", ")}`, ["src/engine/knowledge_injection_boundary.ts"], "release-issues", "index_only 资产不得进入 matched_knowledge 或 prompt", "修复注入边界逻辑");
+                }
+                // prompt 中也不得包含 index_only 资产内容
+                const promptStr = exp.prompt ?? "";
+                const leakedInPrompt = all.project.filter((e) => {
+                    const contract = contracts.find(c => c.asset_id === e.id || c.path.endsWith(e.name + ".md"));
+                    return contract?.runtime_visibility === "index_only" && e.body && promptStr.includes(e.body.slice(0, 50));
+                });
+                if (leakedInPrompt.length > 0) {
+                    hardFail("RELEASE_ISSUE_INDEX_ONLY_PROMPT_LEAK", `index_only 资产内容泄漏到 prompt: ${leakedInPrompt.map((e) => e.id).join(", ")}`, ["src/engine/knowledge_injection_boundary.ts"], "release-issues", "index_only 资产内容不得出现在 prompt 中", "修复注入边界逻辑");
+                }
+            }
+            finally {
+                harness.cleanup();
+            }
+        }
+        catch (err) {
+            // R11: fail-closed — 缺少前置条件或异常 = hard_fail
+            hardFail("RELEASE_ISSUE_INDEX_ONLY_PROMPT_LEAK", `index_only 行为检查失败: ${err.message}`, ["src/engine/knowledge_injection_boundary.ts"], "release-issues", "index_only 行为检查不得跳过", "修复 index_only 检查前置条件");
+        }
+    }
+    // R10: 权威来源 fail-closed 主动负向测试 — 已注册但文件缺失必须被阻断
+    {
+        const { getConsumptionTraces, clearConsumptionTraces } = await import("../consumption_trace_store.js");
+        // 先检查已有 traces
+        const traces = getConsumptionTraces();
+        const authorityLeaks = traces.filter((t) => t.matched_reason?.includes("权威来源文件缺失") && t.contract_decision === "allowed");
+        if (authorityLeaks.length > 0) {
+            hardFail("RELEASE_ISSUE_AUTHORITIVE_FAIL_OPEN", `权威来源缺失的资产被 allowed: ${authorityLeaks.map((t) => t.asset_id).join(", ")}`, ["src/knowledge/index_manager.ts"], "release-issues", "已注册资产权威来源缺失时必须 fail-closed", "检查 filterByContractGate 逻辑");
+        }
+        // 主动负向测试: 创建临时项目，manifest 指向不存在的权威文件
+        try {
+            const { copyKnowledgeToProject } = await import("../template_init_sync.js");
+            const { KnowledgeIndexManager } = await import("../../knowledge/index_manager.js");
+            const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "soloforge-r10-auth-"));
+            try {
+                await copyKnowledgeToProject(rootDir, tmpDir);
+                const manifestPath = path.join(tmpDir, ".soloforge", "sync-manifest.json");
+                const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+                const domainKey = Object.keys(manifest.entries).find(k => k.startsWith("domain/"));
+                // R12: 找不到 domain 条目 = hardFail，不得静默通过
+                if (!domainKey) {
+                    hardFail("RELEASE_ISSUE_AUTHORITIVE_FAIL_OPEN", "sync-manifest 中无 domain/ 条目可做篡改测试，前置条件不满足", ["src/engine/template_init_sync.ts"], "release-issues", "权威 fail-closed 测试必须找到可篡改的 domain 合同", "检查 copyKnowledgeToProject 是否同步了 domain 资产");
+                }
+                manifest.entries[domainKey].source_contract_path = "templates/domain/不存在的权威文件.md";
+                fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2), "utf-8");
+                clearConsumptionTraces();
+                const kim = new KnowledgeIndexManager({
+                    tech_stack: { backend: { lang: "java", framework: "spring-boot" }, frontend: { lang: "typescript", framework: "react" } },
+                    _projectPath: tmpDir,
+                }, { watch: false });
+                await kim.build();
+                const domainEntries = kim.getAllEntries().project.filter((e) => e.file_path?.replace(/\\/g, "/").includes(domainKey));
+                await kim.close();
+                // 权威来源缺失 → 不得被索引
+                if (domainEntries.length > 0) {
+                    hardFail("RELEASE_ISSUE_AUTHORITIVE_FAIL_OPEN", `权威缺失的资产被索引: ${domainKey}`, ["src/knowledge/index_manager.ts"], "release-issues", "已注册资产权威来源缺失时必须 fail-closed", "检查 filterByContractGate 逻辑");
+                }
+            }
+            finally {
+                fs.rmSync(tmpDir, { recursive: true, force: true });
+            }
+        }
+        catch (err) {
+            // R11: fail-closed — 找不到篡改目标或执行异常 = hard_fail
+            hardFail("RELEASE_ISSUE_AUTHORITIVE_FAIL_OPEN", `权威 fail-closed 主动测试失败: ${err.message}`, ["src/knowledge/index_manager.ts"], "release-issues", "权威来源缺失测试不得跳过", "检查 filterByContractGate 和模板合同配置");
+        }
+    }
+    // 工作流硬规则正文单真源检查
+    {
+        const { WORKFLOW_TEMPLATE_HARD_RULES } = await import("../asset_manifest.js");
+        const { generateWorkflowRules } = await import("../../adapters/shared/workflow_template.js");
+        const emptyRules = WORKFLOW_TEMPLATE_HARD_RULES.filter(r => r.enforcement_status === "enforced" && (!r.user_instruction || r.user_instruction.trim() === ""));
+        if (emptyRules.length > 0) {
+            hardFail("WORKFLOW_RULE_EMPTY_INSTRUCTION", `enforced 规则 user_instruction 为空: ${emptyRules.map(r => r.rule_id).join(", ")}`, ["src/engine/asset_manifest.ts"], "release-issues", "enforced 规则必须有非空 user_instruction", "为空规则补充用户可见指令文本");
+        }
+        const output = generateWorkflowRules({});
+        for (const rule of WORKFLOW_TEMPLATE_HARD_RULES) {
+            if (rule.user_instruction) {
+                const lines = rule.user_instruction.split("\n").filter(l => l.trim());
+                for (const line of lines) {
+                    if (!output.includes(line)) {
+                        hardFail("WORKFLOW_RULE_TEXT_MISSING_IN_OUTPUT", `规则 ${rule.rule_id} 正文未出现在生成输出: ${line}`, ["src/engine/asset_manifest.ts", "src/adapters/shared/workflow_template.ts"], "release-issues", "每条规则正文必须出现在 generateWorkflowRules 输出", "检查 WORKFLOW_STEPS 中是否遗漏该规则");
+                    }
+                }
+            }
+            if (!output.includes(`id=${rule.rule_id}`)) {
+                hardFail("WORKFLOW_RULE_MARKER_MISSING", `规则 ${rule.rule_id} marker 未出现在生成输出`, ["src/adapters/shared/workflow_template.ts"], "release-issues", "每条规则 marker 必须出现在 generateWorkflowRules 输出", "将规则添加到 WORKFLOW_STEPS");
+            }
+        }
+    }
+    if (/发布问题.*100%|100%.*发布问题/.test(gateDocText)) {
+        hardFail("RELEASE_ISSUE_DOC_PREMATURE_100", "发布门槛文档提前声称发布问题 100% 完成", ["docs/正式发布门槛.md"], "release-issues", "文档不得在返修未完成前声称 100%", "完成所有返修后更新文档");
+    }
+    // ══ 问题六十一: 通用决策研讨机制 ══
+    // TaskContext 必须有强类型通用决策研讨字段
+    const typesText = safeReadCached(path.join(rootDir, "src", "types", "task.ts"), ctx.readCache) ?? "";
+    if (!sourceContainsPattern(typesText, "decision_workshop?: import")) {
+        hardFail("RELEASE_ISSUE_TASKCONTEXT_WEAK_TYPE", "TaskContext 缺少强类型 decision_workshop 字段", ["src/types/task.ts"], "problem-61", "使用 (ctx as any).decision_workshop 是弱类型", "在 TaskContext 添加 decision_workshop 强类型字段");
+    }
+    // tools.ts 不得使用 (ctx as any).decision_workshop
+    if (sourceContainsPropertyAccess(toolsText, "ctx", "decision_workshop") && toolsText.includes("(ctx as any)")) {
+        hardFail("RELEASE_ISSUE_TOOLS_ANY_CAST", "tools.ts 仍使用 (ctx as any).decision_workshop 弱类型", ["src/adapters/claude_code/tools.ts"], "problem-61", "必须使用 TaskContext 强类型字段", "将 (ctx as any).decision_workshop 改为 ctx.decision_workshop");
+    }
+    // ExpandSchema 必须支持 decision_workshop 输入
+    if (!sourceContainsIdentifier(toolsText, "decision_workshop") || (!sourceContainsZodSchema(toolsText, "decision_workshop", "z.record(z.unknown())") && !sourceContainsZodSchema(toolsText, "decision_workshop", "z.unknown()"))) {
+        hardFail("RELEASE_ISSUE_EXPAND_NO_WORKSHOP_INPUT", "ExpandSchema 不支持通用 decision_workshop 输入", ["src/adapters/claude_code/tools.ts"], "problem-61", "用户无法回传确认后的决策合同", "在 ExpandSchema 添加 decision_workshop 输入参数");
+    }
+    if (!sourceContainsIdentifier(toolsText, "parseContractObject") || !sourceContainsIdentifier(toolsText, "JSON.parse")) {
+        hardFail("RELEASE_ISSUE_EXPAND_WORKSHOP_JSON_STRING_UNSUPPORTED", "sf_expand 未兼容 MCP 客户端以 JSON 字符串回传 decision_workshop", ["src/adapters/claude_code/tools.ts"], "problem-61", "真实用户项目中 decision_workshop 被序列化为字符串后触发 undefined.includes 服务端错误", "在 sf_expand 入口解析 JSON 字符串契约，解析失败返回结构化错误");
+    }
+    const dwTextForShape = safeReadCached(path.join(rootDir, "src", "engine", "decision_workshop.ts"), ctx.readCache) ?? "";
+    if (!sourceContainsIdentifier(toolsText, "normalizeDecisionWorkshopContract") || !sourceContainsPattern(dwTextForShape, "MCP 客户端回传的领域字典已规范化")) {
+        hardFail("RELEASE_ISSUE_EXPAND_WORKSHOP_NATURAL_SHAPE_UNSUPPORTED", "sf_expand 未兼容 AI 回传的决策域字典结构", ["src/adapters/claude_code/tools.ts", "src/engine/decision_workshop.ts"], "problem-61", "真实 AI 会回传 { delivery_validation: {...} } 形状，若不规范化会卡在 expanding 或结构无效", "在 decision_workshop.ts 提供 normalizeDecisionWorkshopContract，并在 sf_expand 入口使用");
+    }
+    const s4RecoveryFields = [
+        "technology_decision_contract",
+        "technology_decision_record",
+        "detail_discipline_contract",
+        "provided_details",
+        "first_principles_frame",
+        "brainstorm_session",
+    ];
+    const missingS4SchemaFields = s4RecoveryFields.filter((field) => !sourceContainsZodSchema(toolsText, field, "z.record(z.unknown())") && !sourceContainsZodSchema(toolsText, field, "z.unknown()"));
+    const missingS4ContextFields = s4RecoveryFields.filter((field) => !sourceContainsPattern(typesText, `${field}?:`));
+    const missingS4SaveFields = s4RecoveryFields.filter((field) => !sourceContainsPattern(toolsText, `(ctx as Record<string, unknown>)[field]`) && !sourceContainsPattern(toolsText, `(ctx as unknown as Record<string, unknown>)[field]`) && !sourceContainsPattern(toolsText, `ctx.${field} = parsed.value`));
+    const staleS4AnyFields = s4RecoveryFields.filter((field) => sourceContainsPattern(toolsText, `(ctx as any).${field}`) || sourceContainsPattern(toolsText, `(params.ctx as any).${field}`));
+    if (missingS4SchemaFields.length > 0 || missingS4ContextFields.length > 0 || missingS4SaveFields.length > 0 || staleS4AnyFields.length > 0) {
+        hardFail("RELEASE_ISSUE_S4_RECOVERY_INPUT_MISSING", "S4 强门禁缺少可执行 sf_expand 恢复入口", ["src/adapters/claude_code/tools.ts", "src/types/task.ts"], "problem-16/26/27/42", `缺 schema=${missingS4SchemaFields.join(",")}; 缺 TaskContext=${missingS4ContextFields.join(",")}; 缺保存=${missingS4SaveFields.join(",")}; 弱类型=${staleS4AnyFields.join(",")}`, "所有返回\u201C请提供 X 后重新 sf_expand\u201D的强门禁，都必须在 ExpandSchema 接受 X、写入 TaskContext，并通过强类型主链路消费");
+    }
+    // 架构决策研讨子包必须接入 sf_expand
+    if (!sourceContainsIdentifier(toolsText, "checkArchitectureDecisionWorkshopGate") ||
+        !sourceContainsPattern(toolsText, "projectContext: detectedArchitectureContext")) {
+        hardFail("RELEASE_ISSUE_MAINLINE_MISSING", "问题六十一架构研讨子包未接入 sf_expand", ["src/adapters/claude_code/tools.ts"], "problem-61", "仅有合同或模板不能证明主链路消费", "在 sf_expand 真实路由调用架构研讨门");
+    }
+    // 通用决策研讨必须接入 sf_expand（可组合决策包）
+    if (!sourceContainsIdentifier(toolsText, "lazyDecisionWorkshop") || !sourceContainsIdentifier(toolsText, "matchDecisionPacks") || !sourceContainsIdentifier(toolsText, "nonArchPacks")) {
+        hardFail("RELEASE_ISSUE_DECISION_WORKSHOP_MISSING", "问题六十一通用决策研讨未接入 sf_expand 可组合决策包", ["src/adapters/claude_code/tools.ts"], "problem-61", "非架构高影响任务也必须门禁，且必须支持组合多个决策包", "在 sf_expand 接入 matchDecisionPacks 门禁");
+    }
+    // DecisionPackRegistry 必须有 business_process 和 delivery_validation 独立包
+    {
+        const dwText = safeReadCached(path.join(rootDir, "src", "engine", "decision_workshop.ts"), ctx.readCache) ?? "";
+        if (!dwText.includes("business_process") || !dwText.includes("delivery_validation")) {
+            hardFail("RELEASE_ISSUE_DECISION_PACK_MISSING", "问题六十一 DecisionPackRegistry 缺少 business_process 或 delivery_validation 独立包", ["src/engine/decision_workshop.ts"], "problem-61", "业务流程和交付验证必须可独立触发", "在 DECISION_PACKS 添加 business_process 和 delivery_validation");
+        }
+    }
+    try {
+        const dw = await import(path.join(rootDir, "dist", "engine", "decision_workshop.js"));
+        // must-fail: 未确认的技术选型必须阻断
+        const techContract = dw.createDecisionWorkshop("gate-test", "technology_selection");
+        const techGate = dw.evaluateDecisionWorkshop(techContract);
+        if (techGate.allowed) {
+            hardFail("RELEASE_ISSUE_DECISION_FALSE_PASS", "问题六十一未确认技术选型草稿错误放行", ["src/engine/decision_workshop.ts"], "problem-61", "技术选型未确认应阻断", "修复 evaluateDecisionWorkshop");
+        }
+        // must-fail: 低风险任务不需要研讨
+        const lowRisk = dw.requiresDecisionWorkshop({ intent: "修复按钮颜色" });
+        if (lowRisk.required) {
+            hardFail("RELEASE_ISSUE_DECISION_LOW_RISK_BLOCKED", "问题六十一低风险任务错误触发决策研讨", ["src/engine/decision_workshop.ts"], "problem-61", "低风险任务不应触发研讨", "修复 requiresDecisionWorkshop 触发条件");
+        }
+        // must-pass: 确认的技术选型放行
+        const confirmed = dw.createDecisionWorkshop("gate-test-2", "technology_selection");
+        confirmed.extended_domains.technology_selection.status = "confirmed";
+        confirmed.extended_domains.technology_selection.user_confirmation_ref = "user-ok";
+        if (!dw.evaluateDecisionWorkshop(confirmed).allowed) {
+            hardFail("RELEASE_ISSUE_DECISION_CONFIRMED_BLOCKED", "问题六十一已确认决策仍被阻断", ["src/engine/decision_workshop.ts"], "problem-61", "已确认决策应放行", "修复 evaluateDecisionWorkshop 确认检查");
+        }
+    }
+    catch (error) {
+        hardFail("RELEASE_ISSUE_DECISION_LOAD_FAILED", `无法执行问题六十一行为复验: ${error?.message ?? error}`, ["src/engine/decision_workshop.ts"], "problem-61", "模块不可执行", "修复构建或导出");
+    }
+    // ══ 问题六十二: 标准资产覆盖机制 ══
+    if (!sourceContainsCall(toolsText, "verifyDesignArtifactPack") ||
+        !sourceContainsPattern(toolsText, "ctx.design_artifact_pack.status !== \"implementation_ready\"") ||
+        !sourceContainsCall(toolsText, "checkDesignArtifactWriteGate")) {
+        hardFail("RELEASE_ISSUE_MAINLINE_MISSING", "问题六十二设计产物包子机制未接入真实消费路径", ["src/adapters/claude_code/tools.ts"], "problem-62", "仅有文档校验函数不能阻断用户编码/交付", "在验证、写入与交付路径消费设计产物包状态");
+    }
+    if (!sourceContainsCall(toolsText, "auditDesignImplementationTraceability") ||
+        !sourceContainsIdentifier(toolsText, "verifyChangedFilesAgainstDesignTraceability") ||
+        !sourceContainsIdentifier(toolsText, "TOOL_DIAGNOSTIC_CODES.traceabilityVerifyFailed")) {
+        hardFail("RELEASE_ISSUE_TRACEABILITY_MAINLINE_MISSING", "问题七十三追踪契约未接入 sf_expand/sf_verify 主链路", ["src/adapters/claude_code/tools.ts", "src/engine/traceability.ts"], "problem-73", "只审计设计产物不能保证编码来自需求、原型、架构、详细设计和切片", "在 sf_expand 编码前门和 sf_verify changed_files 门接入追踪契约");
+    }
+    const traceabilityText = safeReadCached(path.join(rootDir, "src", "engine", "traceability.ts"), ctx.readCache) ?? "";
+    const nextPlannerText = safeReadCached(path.join(rootDir, "src", "engine", "next_action_planner.ts"), ctx.readCache) ?? "";
+    if (!sourceContainsIdentifier(traceabilityText, "DESIGN_IMPLEMENTATION_TRACEABILITY_TEMPLATE_PATH") ||
+        !sourceContainsIdentifier(traceabilityText, "recovery_command") ||
+        !sourceContainsIdentifier(traceabilityText, "recovery_zh") ||
+        !sourceContainsIdentifier(nextPlannerText, "DESIGN_IMPLEMENTATION_TRACEABILITY_TEMPLATE_PATH") ||
+        !sourceContainsPattern(cliText, "finding.template_path") ||
+        !sourceContainsPattern(cliText, "finding.recovery_command")) {
+        hardFail("RELEASE_ISSUE_TRACEABILITY_RECOVERY_PATH_MISSING", "问题七十三追踪矩阵强门禁缺少模板/引导/审计恢复路径", ["src/engine/traceability.ts", "src/engine/next_action_planner.ts", "src/bin/soloforge.ts"], "problem-73", "强门禁只阻断不给模板和恢复命令会导致用户无法闭环", "为追踪矩阵 finding、soloforge next 和 audit-design-artifacts 输出模板路径与恢复命令");
+    }
+    const designPackText = safeReadCached(path.join(rootDir, "src", "engine", "design_artifact_pack.ts"), ctx.readCache) ?? "";
+    if (!designPackText.includes("traceability_matrix") ||
+        !designPackText.includes("auditDesignImplementationTraceability")) {
+        hardFail("RELEASE_ISSUE_TRACEABILITY_DESIGN_AUDIT_MISSING", "问题七十三未并入设计产物包审计", ["src/engine/design_artifact_pack.ts"], "problem-73", "追踪矩阵不进入 audit-design-artifacts 会导致用户设计阶段无法发现缺口", "把追踪矩阵作为设计产物包权威资产审计");
+    }
+    const lifecycleContractText = safeReadCached(path.join(rootDir, "src", "engine", "design_lifecycle_contract.ts"), ctx.readCache) ?? "";
+    const lifecycleKnowledgeText = safeReadCached(path.join(rootDir, "src", "engine", "lifecycle_knowledge_contract.ts"), ctx.readCache) ?? "";
+    if (!lifecycleContractText.includes("detail_design") ||
+        !lifecycleContractText.includes("docs/architecture/02-数据库设计文档.md") ||
+        !lifecycleContractText.includes("docs/architecture/03-API接口规格文档.md") ||
+        !lifecycleContractText.includes("optional_implementation_detail_document") ||
+        !lifecycleContractText.includes("docs/architecture/04-开发切片计划.md") ||
+        !lifecycleContractText.includes("DESIGN_LIFECYCLE_LEGACY_SLICE_PLAN_PATHS") ||
+        !lifecycleContractText.includes("slice_planning") ||
+        !designPackText.includes("getDesignLifecycleArtifactPaths")) {
+        hardFail("RELEASE_ISSUE_DESIGN_LIFECYCLE_CONTRACT_MISSING", "设计、实现、测试、验收生命周期 I/O 合同缺失或未被设计产物包消费", ["src/engine/design_lifecycle_contract.ts", "src/engine/design_artifact_pack.ts"], "problem-62/problem-73", "没有中心合同会导致后续门禁凭空新增输入输出，详细设计又被误判成单文件", "建立中心生命周期合同，并让设计产物包、追踪审计和 hook 消费同一合同");
+    }
+    if (!lifecycleKnowledgeText.includes("evaluateLifecycleKnowledgeDecision") ||
+        !lifecycleKnowledgeText.includes("selectProjectKnowledgeForTaskWithReasons") ||
+        !lifecycleKnowledgeText.includes("auditDesignImplementationTraceability") ||
+        !lifecycleKnowledgeText.includes("assessControlledGenerationChain")) {
+        hardFail("RELEASE_ISSUE_UNIFIED_LIFECYCLE_KNOWLEDGE_CONTRACT_MISSING", "生命周期、项目知识选择和证据消费仍未收口到统一决策合同", ["src/engine/lifecycle_knowledge_contract.ts"], "problem-62/problem-73/project-knowledge-control-plane", "三个并行机制会导致 next/expand/verify/deliver 各自新增局部口径", "建立并强制消费 evaluateLifecycleKnowledgeDecision");
+    }
+    const injectionBoundaryText = safeReadCached(path.join(rootDir, "src", "engine", "knowledge_injection_boundary.ts"), ctx.readCache) ?? "";
+    if (injectionBoundaryText.includes("buildTemplateAssetContracts(process.cwd())")) {
+        hardFail("RELEASE_ISSUE_KNOWLEDGE_CONTRACT_CWD_DRIFT", "知识注入边界仍用 process.cwd() 读取模板合同", ["src/engine/knowledge_injection_boundary.ts"], "project-knowledge-consumption", "用户项目、全局安装和测试目录会取错合同根目录", "改为从模块根或显式合同根读取模板合同");
+    }
+    if (!cliText.includes("cmdAuditDesignArtifacts") ||
+        !cliText.includes("cmdUpgradeDesignArtifacts") ||
+        !cliText.includes("currentTask?.design_artifact_pack")) {
+        hardFail("RELEASE_ISSUE_USER_CLI_MISSING", "问题六十二缺少用户 CLI 审计/升级或 Claude Code 写入 hook 阻断路径", ["src/bin/soloforge.ts"], "problem-62", "MCP 内部调用不能覆盖用户现有文档升级与直接 Edit/Write 路径", "接入 audit/upgrade CLI 与 check-write 设计产物门");
+    }
+    // 标准资产覆盖机制必须使用真实注册表审计
+    try {
+        const cov = await import(path.join(rootDir, "dist", "engine", "standard_asset_coverage.js"));
+        const car = await import(path.join(rootDir, "dist", "engine", "consumable_asset_registry.js"));
+        const manifest = await import(path.join(rootDir, "dist", "engine", "asset_manifest.js"));
+        // 从真实注册表构建消费证据
+        const registeredAssets = car.listBuiltinConsumableAssets();
+        const consumablePaths = new Set(registeredAssets.map((a) => a.path));
+        const ownerMap = new Map(registeredAssets.map((a) => [a.path, a.owner_mechanism_id ?? ""]));
+        const manifestEntries = manifest.ASSET_MANIFEST;
+        const consumerMap = new Map(manifestEntries.map((e) => [e.path, []]));
+        const visibilityMap = new Map(manifestEntries.map((e) => [e.path, e.consumption_mode ?? "unknown"]));
+        const report = cov.auditStandardAssetCoverage(rootDir, consumablePaths, ownerMap, consumerMap, visibilityMap);
+        // 必须能审计并返回结构化报告
+        if (typeof report.total_assets !== "number" || typeof report.covered_assets !== "number") {
+            hardFail("RELEASE_ISSUE_COVERAGE_REPORT_INVALID", "问题六十二覆盖审计报告结构不完整", ["src/engine/standard_asset_coverage.ts"], "problem-62", "审计报告缺少必须字段", "修复 auditStandardAssetCoverage 返回结构");
+        }
+        // 不得传空 Set/空 Map 通过覆盖检查 — 必须使用真实数据
+        if (report.total_assets > 0 && report.covered_assets === report.total_assets && consumablePaths.size === 0) {
+            hardFail("RELEASE_ISSUE_COVERAGE_EMPTY_REGISTRY_PASS", "问题六十二空注册表不应全部覆盖", ["src/engine/standard_asset_coverage.ts"], "problem-62", "空注册表时所有资产必须 uncovered", "修复覆盖检查使用真实注册表");
+        }
+    }
+    catch (error) {
+        hardFail("RELEASE_ISSUE_COVERAGE_LOAD_FAILED", `无法执行问题六十二覆盖审计行为复验: ${error?.message ?? error}`, ["src/engine/standard_asset_coverage.ts"], "problem-62", "模块不可执行", "修复构建或导出");
+    }
+    try {
+        const workshop = await import(path.join(rootDir, "dist", "engine", "architecture_decision_workshop.js"));
+        const designPack = await import(path.join(rootDir, "dist", "engine", "design_artifact_pack.js"));
+        const lifecycle = await import(path.join(rootDir, "dist", "engine", "design_lifecycle_contract.js"));
+        const lifecycleFindings = lifecycle.validateDesignLifecycleContract();
+        if (lifecycleFindings.length > 0) {
+            hardFail("RELEASE_ISSUE_DESIGN_LIFECYCLE_CONTRACT_INVALID", `设计生命周期合同不满足不变量: ${lifecycleFindings.map((finding) => finding.code).join(",")}`, ["src/engine/design_lifecycle_contract.ts"], "problem-62/problem-73", "生命周期合同必须明确设计、实现、测试、验收节点的输入输出和门禁", "修复 validateDesignLifecycleContract 报告的不变量缺口");
+        }
+        const detailStage = lifecycle.getDesignLifecycleStageContract("detail_design");
+        const detailRequiredOutputs = detailStage.outputs.filter((artifact) => artifact.required).map((artifact) => artifact.path);
+        if (!detailRequiredOutputs.includes("docs/architecture/02-数据库设计文档.md") ||
+            !detailRequiredOutputs.includes("docs/architecture/03-API接口规格文档.md") ||
+            detailRequiredOutputs.includes("docs/architecture/04-详细设计文档.md")) {
+            hardFail("RELEASE_ISSUE_DETAIL_DESIGN_TOPOLOGY_INVALID", "详细设计阶段输出拓扑错误", ["src/engine/design_lifecycle_contract.ts"], "problem-62/problem-73", "详细设计必需载体是数据库设计和 API 规格，04-详细设计文档只能是可选兼容", "修复 detail_design 生命周期合同");
+        }
+        const lifecyclePaths = lifecycle.getDesignLifecycleArtifactPaths();
+        if (lifecyclePaths.slice_plan !== "docs/architecture/04-开发切片计划.md") {
+            hardFail("RELEASE_ISSUE_SLICE_PLAN_CANONICAL_PATH_INVALID", "开发切片计划仍绑定到固定阶段文件", ["src/engine/design_lifecycle_contract.ts"], "problem-62/problem-73", "切片计划是全项目调度权威资产，不能命名成第一阶段", "将 canonical slice_plan 改为 docs/architecture/04-开发切片计划.md，旧第一阶段文件仅作为 alias");
+        }
+        const packPaths = designPack.defaultDesignArtifactPaths();
+        if (JSON.stringify(lifecyclePaths) !== JSON.stringify(packPaths)) {
+            hardFail("RELEASE_ISSUE_DESIGN_PACK_PATH_DRIFT", "设计产物包路径与生命周期合同漂移", ["src/engine/design_lifecycle_contract.ts", "src/engine/design_artifact_pack.ts"], "problem-62/problem-73", "设计产物包不得独立硬编码另一套输入输出路径", "让 defaultDesignArtifactPaths 从 getDesignLifecycleArtifactPaths 派生");
+        }
+        const draft = workshop.createArchitectureDecisionWorkshop("release-issue", "new_system");
+        if (workshop.evaluateArchitectureDecisionWorkshop(draft).allowed) {
+            hardFail("RELEASE_ISSUE_BEHAVIOR_FALSE_PASS", "问题六十一未确认六域的草稿错误放行", ["src/engine/architecture_decision_workshop.ts"], "problem-61", "必须有负向行为证据", "修复研讨生成门");
+        }
+        const missingPackResult = designPack.verifyDesignArtifactPack(rootDir, designPack.createDesignArtifactPack("release-issue"));
+        if (missingPackResult.passed) {
+            hardFail("RELEASE_ISSUE_BEHAVIOR_FALSE_PASS", "问题六十二缺少用户项目设计产物时错误放行", ["src/engine/design_artifact_pack.ts"], "problem-62", "必须读取真实资产并阻断缺失", "修复设计产物复验门");
+        }
+        const traceability = await import(path.join(rootDir, "dist", "engine", "traceability.js"));
+        const tmp = fs.mkdtempSync(path.join(os.tmpdir(), "sf-trace-gate-"));
+        const write = (relativePath, content) => {
+            const target = path.join(tmp, relativePath);
+            fs.mkdirSync(path.dirname(target), { recursive: true });
+            fs.writeFileSync(target, content);
+        };
+        write("docs/architecture/01-架构设计文档.md", "# 架构\n来源: REQ-001, PROTO-001\nARCH-001");
+        const missingTrace = traceability.auditDesignImplementationTraceability(tmp);
+        if (missingTrace.passed || !missingTrace.findings.some((f) => f.code === "TRACEABILITY_MATRIX_MISSING")) {
+            hardFail("RELEASE_ISSUE_TRACEABILITY_MATRIX_FALSE_PASS", "问题七十三缺少追踪矩阵时错误放行", ["src/engine/traceability.ts", "src/engine/design_artifact_pack.ts"], "problem-73", "设计产物存在但无追踪矩阵必须阻断", "修复 auditDesignImplementationTraceability");
+        }
+        write("docs/traceability/01-需求原型设计实现追踪矩阵.md", [
+            "# 需求原型设计实现追踪矩阵",
+            "| 需求 | 原型 | 架构 | 详细设计 | 切片 | 验收 |",
+            "| --- | --- | --- | --- | --- | --- |",
+            "| REQ-001 | PROTO-001 | ARCH-001 | DD-T001, DD-A001 | PHASE-001, SLICE-001 | AC-001 |",
+        ].join("\n"));
+        write("docs/architecture/02-数据库设计文档.md", "# 数据库设计\nARCH-001 -> DD-T001");
+        write("docs/architecture/03-API接口规格文档.md", "# API 设计\nARCH-001 -> DD-A001");
+        write("docs/architecture/04-开发切片计划.md", "# 开发切片计划\nPHASE-001\nSLICE-001\n来源 DD-T001, DD-A001\n验收 AC-001");
+        const bindingFail = traceability.verifyChangedFilesAgainstDesignTraceability(tmp, ["src/main/java/demo/BedService.java"], {
+            task_id: "trace-gate",
+            created_at: new Date().toISOString(),
+            intent: "实现资源管理",
+            product_profile: "default",
+            status: "executing",
+        });
+        if (bindingFail.passed || !bindingFail.findings.some((f) => f.code === "TRACEABILITY_CODE_BINDING_MISSING")) {
+            hardFail("RELEASE_ISSUE_TRACEABILITY_CODE_BINDING_FALSE_PASS", "问题七十三编码缺少 PHASE/SLICE/DD/AC 绑定时错误放行", ["src/engine/traceability.ts", "src/adapters/claude_code/tools.ts"], "problem-73", "实现代码必须能追溯到详细设计、切片和验收", "修复 sf_expand/sf_verify 追踪绑定门");
+        }
+        const bindingPass = traceability.verifyChangedFilesAgainstDesignTraceability(tmp, ["src/main/java/demo/BedService.java"], {
+            task_id: "trace-gate-ok",
+            created_at: new Date().toISOString(),
+            intent: "实现资源管理 PHASE-001 SLICE-001 DD-T001 DD-A001 AC-001",
+            product_profile: "default",
+            status: "executing",
+        });
+        if (!bindingPass.passed) {
+            hardFail("RELEASE_ISSUE_TRACEABILITY_CODE_BINDING_FALSE_BLOCK", "问题七十三合法 PHASE/SLICE/DD/AC 绑定被错误阻断", ["src/engine/traceability.ts"], "problem-73", "合法追踪绑定应允许编码验证继续", "修复 traceability binding 校验");
+        }
+    }
+    catch (error) {
+        hardFail("RELEASE_ISSUE_MODULE_LOAD_FAILED", `无法执行 发布问题行为复验: ${error?.message ?? error}`, ["src/engine/architecture_decision_workshop.ts", "src/engine/design_artifact_pack.ts", "src/engine/traceability.ts"], "发布问题", "模块不可执行", "修复构建或导出");
+    }
+    if (!workflowText.includes("wf-architecture-workshop-first") || !workflowText.includes("wf-design-artifact-pack")) {
+        hardFail("RELEASE_ISSUE_USER_INJECTION_MISSING", "用户项目工作流模板未注入 发布问题硬协议", ["src/adapters/shared/workflow_template.ts"], "problem-61/problem-62", "运行时有门但用户不可预期会造成体验断裂", "向 workflow template 注入硬规则");
+    }
+    // workflow_template @sf-hard-rule 机制 ID 必须能解析到权威机制注册条目且资产文件存在
+    try {
+        const { validateWorkflowRuleSources } = await import("../../adapters/shared/workflow_template.js");
+        const wfValidation = validateWorkflowRuleSources(rootDir);
+        if (!wfValidation.valid) {
+            if (wfValidation.missing_mechanisms.length > 0) {
+                hardFail("RELEASE_ISSUE_WF_RULE_MISSING_MECHANISM", `工作流模板引用了未注册的机制: ${wfValidation.missing_mechanisms.join(", ")}`, ["src/adapters/shared/workflow_template.ts"], "发布问题", "硬编码规则与权威机制注册表漂移", "在 dual_layer_mechanism_registry 中注册缺失机制或修正 workflow_template 引用");
+            }
+            if (wfValidation.missing_assets.length > 0) {
+                hardFail("RELEASE_ISSUE_WF_RULE_MISSING_ASSET", `工作流模板规则的权威资产文件缺失: ${wfValidation.missing_assets.join(", ")}`, ["src/adapters/shared/workflow_template.ts"], "发布问题", "权威规则资产文件不存在", "恢复缺失的模板文件或修正注册表路径");
+            }
+            if (wfValidation.checksum_mismatch) {
+                hardFail("RELEASE_ISSUE_WF_RULE_CONTENT_DRIFT", `工作流模板权威规则内容校验和不匹配: 嵌入=${wfValidation.embedded_checksum}, 实际=${wfValidation.computed_checksum}`, ["src/adapters/shared/workflow_template.ts"], "发布问题", "权威规则资产内容已变化但工作流模板未同步", "运行 updateEmbeddedChecksum 或重新生成工作流模板");
+            }
+        }
+    }
+    catch (error) {
+        hardFail("RELEASE_ISSUE_WF_RULE_VALIDATION_FAILED", `工作流规则来源校验失败: ${error?.message ?? error}`, ["src/adapters/shared/workflow_template.ts"], "发布问题", "校验函数不可执行", "修复 validateWorkflowRuleSources 导出");
+    }
+    // ══ 问题六十三: 标准资产契约 ══
+    const sacText = safeReadCached(path.join(rootDir, "src", "engine", "standard_asset_contract.ts"), ctx.readCache) ?? "";
+    if (!sourceContainsIdentifier(sacText, "matchTemplateContract") || !sourceContainsIdentifier(sacText, "verifyOutputAgainstContract") || !sourceContainsIdentifier(sacText, "createRepairReverifyDirective")) {
+        hardFail("RELEASE_ISSUE_CONTRACT_MISSING", "问题六十三缺少模板契约匹配、产物验证或修复重验函数", ["src/engine/standard_asset_contract.ts"], "problem-63", "缺少核心函数不能实现契约验证", "实现 matchTemplateContract / verifyOutputAgainstContract / createRepairReverifyDirective");
+    }
+    // sf_verify 必须按文件逐一匹配契约（不得使用 changed_files[0] 的契约校验全部文件）
+    if (!sourceContainsIdentifier(toolsText, "lazyStandardAssetContract") || !sourceContainsIdentifier(toolsText, "TOOL_DIAGNOSTIC_CODES.contractDraft") || !sourceContainsIdentifier(toolsText, "repair_reverify_directive")) {
+        hardFail("RELEASE_ISSUE_CONTRACT_MAINLINE_MISSING", "问题六十三未接入 sf_verify 模板契约验证和 sf_deliver 修复重验阻断", ["src/adapters/claude_code/tools.ts"], "problem-63", "仅有契约定义不能阻断交付", "在 sf_verify 消费模板契约验证、sf_deliver 消费修复重验阻断");
+    }
+    // 必须检查 per-file 匹配（不得 changed_files[0] 统一匹配）
+    if (sourceContainsPattern(toolsText, "file_path: args.changed_files?.[0]") && !sourceContainsIdentifier(toolsText, "file_path: changedFile")) {
+        hardFail("RELEASE_ISSUE_CONTRACT_SINGLE_FILE_MATCH", "问题六十三 sf_verify 仍使用 changed_files[0] 单一匹配", ["src/adapters/claude_code/tools.ts"], "problem-63", "一个契约不能校验所有文件", "改为按文件逐一匹配 matchTemplateContract");
+    }
+    // 草稿必须阻断（不得 continue 跳过）
+    if (!sourceContainsIdentifier(toolsText, "SF-CONTRACT-DRAFT")) {
+        hardFail("RELEASE_ISSUE_CONTRACT_DRAFT_SKIP", "问题六十三草稿文件未阻断下游消费", ["src/adapters/claude_code/tools.ts"], "problem-63", "草稿不得静默跳过", "草稿必须写入 blocked 状态并阻断");
+    }
+    try {
+        const sac = await import(path.join(rootDir, "dist", "engine", "standard_asset_contract.js"));
+        if (sac.matchTemplateContract({ file_path: "docs/architecture/01-架构设计文档.md" }) === null) {
+            hardFail("RELEASE_ISSUE_CONTRACT_MATCH_FAILURE", "问题六十三模板匹配失败：架构设计文档路径应匹配模板契约", ["src/engine/standard_asset_contract.ts"], "problem-63", "精确路径应匹配 P0 模板", "修复 matchTemplateContract 路径匹配逻辑");
+        }
+    }
+    catch (error) {
+        hardFail("RELEASE_ISSUE_CONTRACT_LOAD_FAILED", `无法执行问题六十三行为复验: ${error?.message ?? error}`, ["src/engine/standard_asset_contract.ts"], "problem-63", "模块不可执行", "修复构建或导出");
+    }
+    // ══ 问题六十四: 模板资产可见性 ══
+    const visText = safeReadCached(path.join(rootDir, "src", "engine", "template_asset_visibility.ts"), ctx.readCache) ?? "";
+    if (!visText.includes("isInherentlyInternal") || !visText.includes("inferVisibilityFromPath") || !visText.includes("filterSyncAssets")) {
+        hardFail("RELEASE_ISSUE_VISIBILITY_MISSING", "问题六十四缺少内部资产识别、可见性推断或同步过滤函数", ["src/engine/template_asset_visibility.ts"], "problem-64", "缺少核心函数不能实现可见性门禁", "实现 isInherentlyInternal / inferVisibilityFromPath / filterSyncAssets");
+    }
+    const syncText = safeReadCached(path.join(rootDir, "src", "engine", "template_init_sync.ts"), ctx.readCache) ?? "";
+    if (!cliText.includes("getContractDecision") && !syncText.includes("getContractDecision")) {
+        hardFail("RELEASE_ISSUE_VISIBILITY_SYNC_MISSING", "问题六十四 copyKnowledgeTemplates 未接入可见性门禁", ["src/engine/template_init_sync.ts"], "problem-64", "init/sync 不加门禁会泄漏内部资产到用户项目", "在 template_init_sync 中消费可见性门禁");
+    }
+    // copyKnowledgeTemplates 不得使用 subDirs 硬编码列表
+    if (cliText.includes("const subDirs = [")) {
+        hardFail("RELEASE_ISSUE_VISIBILITY_SUBDIRS_HARDCODE", "问题六十四 copyKnowledgeTemplates 仍使用 subDirs 硬编码列表", ["src/bin/soloforge.ts"], "problem-64", "硬编码 subDirs 无法覆盖新增目录", "改为递归发现并统一走可见性门禁");
+    }
+    // scaffolder 不得使用 process.cwd() 作为内置路径 fallback
+    const scaffolderText = safeReadCached(path.join(rootDir, "src", "engine", "scaffolder.ts"), ctx.readCache) ?? "";
+    if (scaffolderText.includes("process.cwd()")) {
+        hardFail("RELEASE_ISSUE_SCAFFOLDER_CWD_FALLBACK", "问题六十四 scaffolder 仍使用 process.cwd() 作为内置路径", ["src/engine/scaffolder.ts"], "problem-64", "process.cwd() 在 npm 安装场景解析错误", "改为 import.meta.dirname 解析包内路径");
+    }
+    try {
+        const vis = await import(path.join(rootDir, "dist", "engine", "template_asset_visibility.js"));
+        // 内部资产必须被识别
+        if (!vis.isInherentlyInternal("templates/internal/rules/演进回归门控规则.md")) {
+            hardFail("RELEASE_ISSUE_VISIBILITY_INTERNAL_MISS", "问题六十四内部资产识别失败：演进回归门控规则应被识别为内部资产", ["src/engine/template_asset_visibility.ts"], "problem-64", "denylist 不生效", "修复 isInherentlyInternal 逻辑");
+        }
+        // 用户可见资产不应被识别为内部
+        if (vis.isInherentlyInternal("templates/artifacts/shared/架构设计模版.md")) {
+            hardFail("RELEASE_ISSUE_VISIBILITY_USER_MISS", "问题六十四用户项目资产误判为内部资产", ["src/engine/template_asset_visibility.ts"], "problem-64", "用户可见资产不应被过滤", "修复 isInherentlyInternal 逻辑");
+        }
+    }
+    catch (error) {
+        hardFail("RELEASE_ISSUE_VISIBILITY_LOAD_FAILED", `无法执行问题六十四行为复验: ${error?.message ?? error}`, ["src/engine/template_asset_visibility.ts"], "problem-64", "模块不可执行", "修复构建或导出");
+    }
+    // ══ 发布问题返修新增门禁 ══
+    // 问题六十一: sf_expand 不得使用不存在的 args.intent
+    {
+        const expandFnMatch = toolsText.match(/\/\/ 问题六十一[\s\S]*?matchDecisionPacks\(\{[^}]*\}\)/);
+        if (expandFnMatch && expandFnMatch[0].includes("args.intent")) {
+            hardFail("RELEASE_ISSUE_DECISION_ARGS_INTENT", "问题六十一 sf_expand 使用不存在的 args.intent 调用 matchDecisionPacks", ["src/adapters/claude_code/tools.ts"], "problem-61", "ExpandSchema 无 intent 字段，args.intent 永远 undefined", "改用 ctx.intent / ctx.classification / ctx.route_decision");
+        }
+    }
+    // 问题六十二: standard_asset_coverage 不得以注册存在替代复验路径
+    {
+        const sacCovText = safeReadCached(path.join(rootDir, "src", "engine", "standard_asset_coverage.ts"), ctx.readCache) ?? "";
+        if (sacCovText.includes("hasRevalidation = isRegistered") || sacCovText.includes("has_revalidation_path: isRegistered")) {
+            hardFail("RELEASE_ISSUE_COVERAGE_FAKE_REVALIDATION", "问题六十二 hasRevalidation=isRegistered 将注册等同于复验路径", ["src/engine/standard_asset_coverage.ts"], "problem-62", "注册存在不等于有复验入口", "必须从真实消费链路验证复验路径");
+        }
+        // 覆盖审计不得从 ASSET_MANIFEST 创建空 consumerMap
+        if (cliText.includes("ASSET_MANIFEST") && cliText.includes("[] as string[]") && cliText.includes("consumerMap")) {
+            hardFail("RELEASE_ISSUE_COVERAGE_EMPTY_CONSUMER", "问题六十二 audit-template-visibility 从 ASSET_MANIFEST 创建空 consumerMap", ["src/bin/soloforge.ts"], "problem-62", "空 consumerMap 导致所有资产 missing_consumer=0 假通过", "从权威合同获取真实消费者");
+        }
+        // 覆盖报告中有 uncovered/missing_consumer 时必须 hard_fail
+        // 消费者证据从逐资产运行时观察结果获取，不从合同声明字段复制
+        try {
+            const cov = await import(path.join(rootDir, "dist", "engine", "standard_asset_coverage.js"));
+            const car = await import(path.join(rootDir, "dist", "engine", "consumable_asset_registry.js"));
+            const contractReg = await import(path.join(rootDir, "dist", "engine", "template_asset_contract_registry.js"));
+            const obsMod = await import(path.join(rootDir, "dist", "engine", "observed_consumption.js"));
+            const registeredAssets = car.listBuiltinConsumableAssets();
+            const contracts = contractReg.listTemplateAssetContracts();
+            const consumablePaths = new Set(registeredAssets.map((a) => a.path));
+            const ownerMap = new Map(contracts.map((c) => [c.path, c.owner_mechanism_id]));
+            // 运行真实 scenario 生成消费 trace，然后构建消费者映射
+            const obsReport = await obsMod.observeAllConsumption(rootDir);
+            const consumerMap = new Map();
+            for (const obs of obsReport.observations) {
+                const consumers = consumerMap.get(obs.asset_path) ?? [];
+                // entry_point 即为真实消费入口
+                if (obs.entry_point && !consumers.includes(obs.entry_point)) {
+                    consumers.push(obs.entry_point);
+                }
+                consumerMap.set(obs.asset_path, consumers);
+            }
+            // 补充复验入口标识（与消费者证据不同维度，复验入口是审计/验证角色标识）
+            for (const c of contracts) {
+                const consumers = consumerMap.get(c.path) ?? [];
+                if (c.validation_entrypoint && !consumers.includes(c.validation_entrypoint)) {
+                    consumers.push(c.validation_entrypoint);
+                }
+                consumerMap.set(c.path, consumers);
+            }
+            const visibilityMap = new Map(contracts.map((c) => [c.path, c.asset_visibility ?? "unknown"]));
+            const report = cov.auditStandardAssetCoverage(rootDir, consumablePaths, ownerMap, consumerMap, visibilityMap);
+            if (report.uncovered_assets > 0) {
+                hardFail("RELEASE_ISSUE_COVERAGE_UNCOVERED", `问题六十二覆盖审计发现 ${report.uncovered_assets} 个未覆盖资产`, ["src/engine/standard_asset_coverage.ts", "src/engine/template_asset_contract_registry.ts"], "problem-62", "未覆盖资产不得通过发布门禁", "为每个资产建立真实消费证据");
+            }
+            if (report.missing_consumer > 0) {
+                hardFail("RELEASE_ISSUE_COVERAGE_MISSING_CONSUMER", `问题六十二覆盖审计发现 ${report.missing_consumer} 个资产缺少主链路消费者`, ["src/engine/standard_asset_coverage.ts", "src/engine/template_asset_contract_registry.ts"], "problem-62", "无消费者证据不得通过发布门禁", "为每个资产建立真实主链路消费者");
+            }
+            if (report.missing_revalidation > 0) {
+                hardFail("RELEASE_ISSUE_COVERAGE_MISSING_REVALIDATION", `问题六十二覆盖审计发现 ${report.missing_revalidation} 个资产缺少复验入口`, ["src/engine/standard_asset_coverage.ts", "src/engine/template_asset_contract_registry.ts"], "problem-62", "无复验入口不得通过发布门禁", "为每个资产建立真实复验入口");
+            }
+        }
+        catch (error) {
+            // template_asset_contract_registry 尚不存在 — 这是预期失败
+            hardFail("RELEASE_ISSUE_CONTRACT_REGISTRY_MISSING", `问题六十三权威合同注册表不存在: ${error?.message ?? error}`, ["src/engine/template_asset_contract_registry.ts"], "problem-63", "214 资产必须有权威合同", "创建 template_asset_contract_registry.ts");
+        }
+    }
+    // 问题六十三: templates 总数 = 权威合同覆盖数
+    {
+        const contractRegText = safeReadCached(path.join(rootDir, "src", "engine", "template_asset_contract_registry.ts"), ctx.readCache) ?? "";
+        if (!contractRegText.includes("TemplateAssetContract") || !contractRegText.includes("listTemplateAssetContracts")) {
+            hardFail("RELEASE_ISSUE_CONTRACT_REGISTRY_MISSING", "问题六十三缺少权威合同注册表（TemplateAssetContract / listTemplateAssetContracts）", ["src/engine/template_asset_contract_registry.ts"], "problem-63", "214 资产必须有单一权威元数据体系", "创建 template_asset_contract_registry.ts");
+        }
+    }
+    // 问题六十四: 可见性不得使用 denylist 猜测
+    {
+        const visText2 = safeReadCached(path.join(rootDir, "src", "engine", "template_asset_visibility.ts"), ctx.readCache) ?? "";
+        if (visText2.includes("INTERNAL_ASSET_PATTERNS")) {
+            hardFail("RELEASE_ISSUE_VISIBILITY_DENYLIST", "问题六十四 template_asset_visibility.ts 仍使用 INTERNAL_ASSET_PATTERNS denylist", ["src/engine/template_asset_visibility.ts"], "problem-64", "denylist 猜测不是权威分类", "改用权威合同注册表的 asset_visibility 字段");
+        }
+    }
+    // 问题六十四: 必须存在并执行真实技术栈受限资产，禁止以跳过或内存假资产代替。
+    {
+        const { buildTemplateAssetContracts } = await import("../template_asset_contract_registry.js");
+        const restrictedScaffolds = buildTemplateAssetContracts(rootDir).filter((contract) => contract.consume_category === "scaffold_only" && contract.applicable_tech_stack.length > 0);
+        if (restrictedScaffolds.length === 0) {
+            hardFail("RELEASE_ISSUE_TECH_STACK_ASSET_MISSING", "问题六十四不存在真实 applicable_tech_stack 脚手架资产", ["src/engine/explicit_asset_registry.ts"], "problem-64", "没有真实受限资产不能证明技术栈隔离", "为内置脚手架声明权威 applicable_tech_stack 并走 sf_scaffold 验证");
+        }
+        const scenarioTestText = safeReadCached(path.join(rootDir, "tests", "engine", "release_issue_scenario_matrix.test.ts"), ctx.readCache) ?? "";
+        const failClosedTestText = safeReadCached(path.join(rootDir, "tests", "engine", "template_asset_contract_registry.test.ts"), ctx.readCache) ?? "";
+        if (/it\.skip\([\s\S]{0,80}技术栈|test-java-rule/.test(`${scenarioTestText}\n${failClosedTestText}`)) {
+            hardFail("RELEASE_ISSUE_TECH_STACK_FAKE_TEST", "问题六十四仍以跳过测试或内存假资产代替真实技术栈复验", ["tests/engine/release_issue_scenario_matrix.test.ts", "tests/engine/template_asset_contract_registry.test.ts"], "problem-64", "假资产/skip 不证明用户实际链路", "仅使用 explicit_asset_registry 已登记资产执行真实 scaffold 场景");
+        }
+    }
+    // sf_accept 必须为需要显式授权的验收入口，且处理器不得直接篡改产物状态。
+    {
+        const contractText = safeReadCached(path.join(rootDir, "src", "engine", "tool_invocation_contract_registry.ts"), ctx.readCache) ?? "";
+        const acceptStart = toolsText.indexOf('registerSafeTool(\n    "sf_accept"');
+        const deliverStart = toolsText.indexOf('registerSafeTool(\n    "sf_deliver"', acceptStart + 1);
+        const acceptBody = toolsText.substring(acceptStart, deliverStart > 0 ? deliverStart : toolsText.length);
+        const contractStrict = /tool_name:\s*"sf_accept"[\s\S]{0,120}category:\s*"strict_controlled"[\s\S]{0,120}requires_authorization:\s*true/.test(contractText);
+        const confirmsEvidence = acceptBody.includes("confirmation_ref") && acceptBody.includes("confirmed_by") && acceptBody.includes("updateArtifactStatus");
+        const directStatusWrite = /artifact_output\.status\s*=\s*"accepted"/.test(acceptBody);
+        if (!contractStrict || !confirmsEvidence || directStatusWrite) {
+            hardFail("RELEASE_ISSUE_ACCEPTANCE_SELF_ATTESTATION", "sf_accept 仍可缺少显式确认或绕过 artifact 生命周期", ["src/adapters/claude_code/tools.ts", "src/engine/tool_invocation_contract_registry.ts"], "problem-63", "自动生成的验收证据不得放行正式产物", "要求显式确认引用并只通过 updateArtifactStatus 接受产物");
+        }
+    }
+    // 问题五十九: 新增 CLI 命令不得使用 console.log
+    {
+        const auditFnStart = cliText.indexOf("async function cmdAuditTemplateVisibility");
+        const nextFnStart = cliText.indexOf("\nasync function ", auditFnStart + 1);
+        const fnBody = cliText.substring(auditFnStart, nextFnStart > 0 ? nextFnStart : cliText.length);
+        if (fnBody.includes("console.log")) {
+            hardFail("RELEASE_ISSUE_LOGGER_VIOLATION", "问题五十九 cmdAuditTemplateVisibility 使用 console.log 违反日志治理", ["src/bin/soloforge.ts"], "problem-59", "新增代码必须使用统一 logger", "替换 console.log 为 userInfo/userJson");
+        }
+    }
+    // 问题六十二/六十三: 逐资产运行时消费证据 — 不得接受"consumer file exists"或"export name exists"作为真实消费证明
+    {
+        const { observeAllConsumption } = await import("../observed_consumption.js");
+        const report = await observeAllConsumption(rootDir);
+        if (report.fail > 0) {
+            hardFail("RELEASE_ISSUE_CONSUMPTION_EVIDENCE_FAIL", `问题六十二逐资产消费证据验证失败(${report.fail} failures): ${report.failures.join("; ")}`, ["src/engine/observed_consumption.ts", "src/engine/template_asset_contract_registry.ts"], "problem-62", "逐资产运行时消费证据不完整", "检查 observeAllConsumption 中每个资产的观察结果");
+        }
+        if (report.total < 215) {
+            hardFail("RELEASE_ISSUE_CONSUMPTION_EVIDENCE_INCOMPLETE", `问题六十二消费证据仅覆盖 ${report.total} 个资产，预期至少 215`, ["src/engine/observed_consumption.ts"], "problem-62", "消费证据覆盖不全", "确保所有注册资产都有消费观察记录");
+        }
+        // trace 必须来自真实入口（init/sync_templates），不得仅来自 contract_gate 兜底
+        const traceCounts = report.trace_counts;
+        if ((traceCounts.init ?? 0) === 0 && (traceCounts.sync_templates ?? 0) === 0) {
+            hardFail("RELEASE_ISSUE_CONSUMPTION_EVIDENCE_NO_REAL_TRACE", "问题六十二消费证据无真实入口 trace（init/sync_templates 均为 0）", ["src/engine/observed_consumption.ts"], "problem-62", "必须运行真实入口 scenario 产生 trace", "检查 observeAllConsumption 中的 scenario runner");
+        }
+        // 硬检查: mainline trace 的 declared_consumer 必须与合同 mainline_consumer 精确匹配
+        for (const obs of report.observations) {
+            if (obs.consume_category === "mainline" && obs.validation_result === "fail" && obs.failure_reason?.includes("无精确消费 trace")) {
+                hardFail("RELEASE_ISSUE_MAINLINE_TRACE_MISMATCH", `mainline 资产消费 trace 不匹配: ${obs.failure_reason}`, ["src/engine/observed_consumption.ts", obs.asset_path], "problem-62", "mainline trace declared_consumer 必须与合同 mainline_consumer 精确对应", "确保生产函数记录 declared_consumer");
+            }
+        }
+    }
+    // 负向测试: scaffold_only 资产必须有 scaffold trace，删除 scaffold scenario 后必须 fail
+    {
+        const { buildTemplateAssetContracts } = await import("../template_asset_contract_registry.js");
+        const { getConsumptionTraces, clearConsumptionTraces, recordConsumptionTrace } = await import("../consumption_trace_store.js");
+        clearConsumptionTraces();
+        // 只运行 init+sync（不运行 scaffold），scaffold_only 资产应无合法 trace
+        const { copyKnowledgeToProject, copyPatternsToGlobal } = await import("../template_init_sync.js");
+        const tmpNegDir = fs.mkdtempSync(path.join(os.tmpdir(), "soloforge-neg-"));
+        try {
+            await copyKnowledgeToProject(rootDir, tmpNegDir);
+            const globalDir = path.join(tmpNegDir, ".soloforge", "patterns");
+            await copyPatternsToGlobal(rootDir, globalDir);
+        }
+        finally {
+            fs.rmSync(tmpNegDir, { recursive: true, force: true });
+        }
+        // 收集 scaffold_only 合同，验证它们都没有 scaffold trace
+        const contracts = buildTemplateAssetContracts(rootDir);
+        const scaffoldContracts = contracts.filter(c => c.consume_category === "scaffold_only");
+        const traces = getConsumptionTraces();
+        const scaffoldTracedPaths = new Set(traces.filter(t => t.consumer === "scaffold").map(t => t.asset_path));
+        const scaffoldWithTrace = scaffoldContracts.filter(c => scaffoldTracedPaths.has(c.path));
+        if (scaffoldWithTrace.length > 0) {
+            hardFail("RELEASE_ISSUE_NEGATIVE_SCAFFOLD_LEAK", `负向测试失败: 未运行 scaffold scenario 但 ${scaffoldWithTrace.length} 个 scaffold_only 资产有 scaffold trace`, ["src/engine/observed_consumption.ts"], "problem-62", "scaffold trace 不应从其他 scenario 泄露", "检查 scaffold scenario 是否独立");
+        }
+        clearConsumptionTraces();
+    }
+    // 问题六十四: copyKnowledgeTemplates 必须对无合同资产 fail-closed
+    {
+        const copyFnSource = syncText || cliText;
+        const copyFnStart = copyFnSource.indexOf("async function copyKnowledge") !== -1
+            ? copyFnSource.indexOf("async function copyKnowledge")
+            : copyFnSource.indexOf("export async function copyKnowledgeToProject");
+        const copyFnEnd = copyFnSource.indexOf("\nasync function ", copyFnStart + 1);
+        const copyFnBody = copyFnSource.substring(copyFnStart, copyFnEnd > 0 ? copyFnEnd : copyFnSource.length);
+        // 必须有 "skipped_no_contract" 或 "unregistered" — 证明无合同时会跳过
+        if (!copyFnBody.includes("skipped_no_contract") && !copyFnBody.includes("unregistered")) {
+            hardFail("RELEASE_ISSUE_COPY_NO_CONTRACT_FAIL_OPEN", "问题六十四 copyKnowledgeTemplates 未对无合同资产 fail-closed", ["src/engine/template_init_sync.ts"], "problem-64", "无合同资产不应被复制", "添加 skipped_no_contract 计数并在无合同时 continue");
+        }
+    }
+}
+//# sourceMappingURL=checkReleaseIssueDesignPath.js.map